Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: NKRwgMgihSzDQlMIzmbxLzWS1aDZAA6//HpOTx2Ltpw=
Subject key identifier: 5E:E5:65:DF:19:C8:AD:7D:E2:E0:D1:5C:9B:18:59:85:D8:2A:02:71
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 01A086AF9F9E9065C38164BC1B272393B9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 092E
Signing time: Wed 09 Sep 2026 15:00:51 +0000
Manifest this update: Wed 09 Sep 2026 15:00:51 +0000
Manifest next update: Thu 10 Sep 2026 15:00:51 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: QHhJxzCUpFTs3C0d1Urn6X06SjTgd5EYXmYvDHA6umA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:af:9f:9e:90:65:c3:81:64:bc:1b:27:23:93:b9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Sep 9 15:00:51 2026 GMT
Not After : Sep 10 15:00:51 2026 GMT
Subject: CN=5ee565df19c8ad7de2e0d15c9b185985d82a0271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:b6:e3:97:92:02:aa:64:fb:b0:d5:75:f3:
80:0c:c5:77:df:fd:a5:5c:63:d9:5f:70:ac:79:63:
50:22:d6:b9:3a:10:6c:3d:c9:a8:5d:74:74:3b:52:
49:7d:29:0e:f0:c7:02:39:16:f2:8c:59:c8:08:02:
06:76:04:e3:46:92:be:37:be:72:67:fe:37:3f:20:
e6:bb:f0:8b:cb:a1:52:11:f1:04:c5:95:bb:d4:97:
a2:ba:a6:a9:8b:b2:dc:05:3e:be:61:d7:2c:69:4d:
65:45:b5:1f:2f:48:0c:46:8d:5f:de:a3:ee:7e:20:
35:42:dc:a5:c1:a4:f5:00:fd:0e:b7:d1:29:3d:f9:
1d:50:89:45:5c:07:d3:c1:b6:e1:02:aa:e0:f2:2b:
65:81:6c:71:b8:b8:b6:d6:59:a2:e3:44:83:fc:95:
be:cb:22:4a:22:df:84:d1:77:62:61:7e:b0:d3:04:
16:0d:8c:f0:20:00:f5:76:44:98:43:f5:30:97:e8:
24:cc:93:fc:d6:d9:fb:6c:51:0a:a8:0a:72:8a:13:
d0:4e:3c:5f:22:cb:83:e8:fd:b3:c4:4a:08:2c:3c:
54:b6:bc:95:15:11:02:0b:08:9d:4f:df:1a:c8:01:
2e:a5:99:76:e9:00:16:08:5c:66:e3:2c:84:41:1a:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E5:65:DF:19:C8:AD:7D:E2:E0:D1:5C:9B:18:59:85:D8:2A:02:71
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:15:42:b8:0d:e1:7b:2a:24:9b:2d:44:0a:bf:3b:c2:21:19:
4e:88:08:94:f3:07:b4:60:55:2a:19:05:79:80:b6:a0:d4:4a:
ce:bd:e6:a7:72:52:02:4d:af:a2:7a:3f:ca:79:49:c7:44:18:
60:55:88:bd:6e:51:a2:92:c2:1a:73:a1:7c:7f:53:ea:ed:d6:
dc:2b:64:e1:29:f2:de:63:20:a2:d2:74:8a:f7:78:01:1b:fd:
3b:4a:28:bc:af:07:ce:c3:c7:42:a2:5c:4d:4d:ee:2c:21:65:
00:ce:90:50:46:f4:e8:9c:ab:59:e7:8c:e2:fe:03:3b:1c:8a:
23:db:e9:f4:3e:8c:74:64:47:b8:b6:be:1b:e7:55:a6:ea:96:
51:87:20:af:36:c8:8b:cf:ee:0a:0d:99:e4:33:6c:2c:db:4b:
10:f6:07:c5:e5:da:14:74:98:6a:c7:14:23:33:67:cd:21:7a:
44:7e:64:52:f2:50:69:ce:10:92:9f:1a:9f:b7:bc:21:3b:ac:
de:00:06:a5:92:1d:4d:40:f8:7b:e1:a3:ef:98:37:b3:c0:54:
14:ad:a2:d2:3e:e8:ca:d8:57:81:cd:8f:d5:b5:6a:61:8a:ed:
ad:bf:e8:df:6c:14:69:d8:9f:ce:17:30:4d:52:13:9d:3f:e2:
83:00:70:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:06:19 2026 by rpki-client